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What is claimed is: 

1. A control system having a download function, 
comprising : 

a first storage element storing execution program data 
for executing a control function in a rewritable status; 

a second storage element storing a download module 
containing fresh pieces of update target execution program 
data and module identifying information; 

a first control unit receiving the download module 
encrypted by an encryption key generated from the same program 
data as the execution program data stored in said first 
storage element and from the module identifying information , 
and storing the received download module in said second 
storage element; and 

a second control unit decrypting the download module 
by an encryption key generated from data in the execution 
program data in said first storage element and from data 
of the download module in said second storage element and 
replacing, when a storage start address, a data length and 
a check digit that are encrypted in the download module are 
decrypted into valid values in a plain text, the execution 
program data in said first storage element with the fresh 
execution program data decrypted. 

2 . A control system having a download function 
according to claim 1, further comprising a third control 
unit making the download module receivable that contains 
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the fresh execution program data for only a predetermined 
fixed period of time after starting the download function. 

3 . A control system having a download function 

5 according to claim 2, further comprising a fourth control 
unit making the download module receivable that contains 
the fresh execution program data by restarting the download 
function when receiving a specified reset command in a state 
of being unable to receive the download module. 

10 

4 . A control system having a download function 
according to claim 2 or 3 , further comprising a third storage 
element storing a loader executed first when starting the 
download function , storing the download module in said second 

15 storage element and executing the execution program data 
for the control function that are stored in said first storage 
element . 

5. A control system having a download function 

20 according to claim 4, further comprising a fifth control 
unit making the execution program data in said first storage 
element executable by the loader when a check digit value 
obtained as a result of calculation based on all pieces of 
data in the execution program data in said first storage 

25 element, is coincident with data in a specified address in 
the execution program data in said first storage element. 



6. A control system having a download function 
according to claim 5, further comprising a sixth control 
unit storing the execution program data, executable and 
stored in said first storage element, in said third storage 
element stored with the loader, and restoring the control 
function by storing said first storage element with the 
loader's own execution program data in said third storage 
element when judging that the execution program data can 
not be executed as a result of checking the execution program 
data in said first storage element upon a startup of the 
loader . 

7 . A control system having a download function 
according to claim 5, further comprising a seventh control 
unit enabling the fresh execution program data to be stored 
by initializing said first storage element into a known status 
when judging that the execution program data can not be 
executed as a result of checking the execution program data 
in said first storage element upon a startup of the loader. 

8 . A control system having a download function 
according to claim 6, further comprising an eighth control 
unit setting a queuing time till the loader's own execution 
program data are stored in said first storage element, and 
restricting a repetition of initializing said first storage 
element by the loader and storing said second storage element 
with the download module containing unlawful execution 
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program data . 

9 . A control system having a download function 
according to claim 7, further comprising a ninth control 

5 unit setting a queuing time till said first storage element 
is initialized by the loader, and restricting a repetition 
of initializing said first storage element by the loader 
and storing said second storage element with the download 
module containing unlawful execution program data. 

10 

10. A control system having a download function 
according to claim 1, wherein the download module is 
structured of a fixed-length header field stored with the 
module identifying information containing at least a module 

15 name, a module creation date, a module version number and 
a storage start address, and at least one data field stored 
with a block length and data having a length corresponding 
to this block length, and 

there is encrypted a block having the data field 

20 containing an actual data length corresponding to the 
execution program data, a storage start address, the 
execution program data, pad data for adjusting a data length 
to a cipherable length and a check digit generated from the 
above data . 

25 

11. A control system having a download function 
according to claim 10, wherein the download module is 



- 46 - 



decrypted by an encryption key generated from the data in 
the execution program data in said first storage element 
and from the data in the module identifying information of 
the download module in said second storage element. 

5 

12. A download control method comprising: 

storing a first storage element with execution program 
data for executing a control function in a rewritable status ; 

storing a second storage element with a download module 
10 containing fresh pieces of update target execution program 
data and module identifying information; 

receiving the download module encrypted by an 
encryption key generated from the same program data as the 
execution program data stored in said first storage element 
15 and from the module identifying information, and storing 
the received download module in said second storage element; 
and 

decrypting the download module by an encryption key 
generated from data in the execution program data in said 

20 first storage element and from data of the download module 
in said second storage element and replacing, when a storage 
start address, a data length and a check digit that are 
encrypted in the download module are decrypted into valid 
values in a plain text, the execution program data in said 

25 first storage element with the fresh execution program data 
decrypted . 
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13. A download control method according to claim 12, 
further comprising making the download module receivable 
that contains the fresh execution program data for only a 
predetermined fixed period of time after starting the 

5 download function. 

14. A download control method according to claim 13 , 
further comprising making the download module receivable 
that contains the fresh execution program data by restarting 

10 the download function when receiving a specified reset 

command in a state of being unable to receive the download 
module . 

15. A download control method according to claim 13 
15 or 14, further comprising executing first a loader stored 

in third storage element, executing the download function 
by this loader, and executing the execution program data 
for the control function that are stored in said first storage 
element when it is normally ended to make the download module 
20 receivable by the download function. 

16. A download control method according to claim 15, 
further comprising making the execution program data in said 
first storage element executable by the loader when a check 

25 digit value obtained as a result of calculation based on 
all pieces of data in the execution program data in said 
first storage element, is coincident with data in a specified 
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address in the execution program data in said first storage 
element . 

17. A download control method according to claim 16, 
5 further comprising: 

storing the execution program data, executable and 
stored in said first storage element, in said third storage 
element stored with the loader; and 

restoring the control function by storing said first 
10 storage element with the loader ' s own execution program data 
in said third storage element when j udging that the execution 
program data can not be executed as a result of checking 
the execution program data in said first storage element 
upon a startup of the loader. 

15 

18. A download control method according to claim 16, 
further comprising enabling the fresh execution program data 
to be stored by initializing said first storage element into 
a known status when judging that the execution program data 

20 can not be executed as a result of checking the execution 
program data in said first storage element upon a startup 
of the loader. 

19. A download control method according to claim 17, 
25 further comprising setting a queuing time till the loader's 

own execution program data are stored in said first storage 
element, and restricting a repetition of initializing said 



first storage element by the loader and storing said second 
storage element with the download module containing unlawful 
execution program data. 

20. A download control method according to claim 18, 
further comprising setting a queuing time till said first 
storage element is initializedby the loader, and restricting 
a repetition of initializing said first storage element by 
the loader and storing said second storage element with the 
download module containing unlawful execution program data . 

21. A download control method according to claim 12, 
wherein the download module is structured of a fixed-length 
header field stored with the module identifying information 
containing at least a module name, a module creation date, 
a module version number and a storage start address, and 
at least one data field stored with a block length and data 
having a length corresponding to this block length, and 

there is encrypted a block having the data field 
containing an actual data length corresponding to the 
execution program data, a storage start address, the 
execution program data, pad data for adjusting a data length 
to a cipherable length and a check digit generated from the 
above data . 

22. A download control method according to claim 21, 
wherein the download module is decrypted by an encryption 
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key generated from the data in the execution program data 
in said first storage element and from the data in the module 
identifying information of the downloadmodule in said second 
storage element. 



